In regards to PCI compliance, I found this article ( https://www.ecommercetemplates.com/support/topic.asp?TOPIC_ID=116476&SearchTerms=ecttestcart,cookie) that a modification of the inccart.php file to comment out three lines will resolve the false alert some pci scanners are reporting. Just wanted to confirm if the same is true for the ASP version? I see the lines :

<script>/* <![CDATA[ */
var ectvalue=Math.floor(Math.random()*10000 + 1);
document.cookie="ECTTESTCART=" + ectvalue + "; path=/<% print IIfVs(request.servervariables("HTTPS")="on","; secure")%>";
if((document.cookie+";").indexOf("ECTTESTCART=" + ectvalue + ";") < 0) document.write("<%=jscheck(xxNoCk & " " & xxSecWar)%>");
/* ]]> */</script>


wanted to confirm if s it safe to comment out this section please.

That's just a test to see if javascript is enabled in the customer's browser and if you don't mind not having the test then sure, that can be commented out.

Vince

Click Here for Shopping Cart Software
Click Here to sign up for our newsletter
Click Here for the latest updater